Pith. sign in

Paper Citation Record · LEDGER

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization

As of 14 August 2026, this Paper Citation Record lists 56 of 56 outbound references and 0 inbound Pith citation observations for arXiv:2507.06856.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2507.06856 v1

Coverage vector

measured 56 of 56 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-06T19:02:05.286844Z

measured 56 of 56 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-14T06:32:32.682623+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

56 of 56 outbound references displayed

  • verified exact5
  • verified fuzzy40
  • unresolved10
  • parse uncertain0
  • malformed identifier1
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 299ab545-9dd4-4b53-b49e-3bb397853bcf · outbound

This paper cites Inconspicuous adversarial patches for fooling image-recognition systems on mobile devices.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Inconspicuous adversarial patches for fooling image-recognition systems on mobile devices

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.918332Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.092400Z digest=sha256:a1eaae42288bec722c128779fcf64cdc7bc52025430f87a01d20089a832d5658

Observation 6af8c1df-4221-4e5c-ad27-4926969925e4 · outbound

This paper cites Adversarial Patch.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Adversarial Patch

Reference 2

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.096629Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.096629Z digest=sha256:88ada74cd744f3f3cf925bb09ea686773d1565b16d0f21b2cd65766824bc8cef

Observation 85693d5e-b752-471a-b3bd-d679fa0cdd10 · outbound

This paper cites Look and think twice: Capturing top-down visual attention with feedback convolutional neural networks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Look and think twice: Capturing top-down visual attention with feedback convolutional neural networks

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.908197Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.100673Z digest=sha256:e74c4da6ea7da231f746e0862da112f867cd09651857fd4821f979d9c1219c59

Observation b0bc6b3b-2dd6-44cd-a702-29f6f9cd2065 · outbound

This paper cites Towards evaluating the robustness of neural networks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Towards evaluating the robustness of neural networks

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.897193Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.104242Z digest=sha256:977f393947156fce3303557a9893efab21aeb01f7fb607f57910f88cca9a3be3

Observation ae8aaa8c-7bdf-4202-9fb7-b2911ac64997 · outbound

This paper cites Jujutsu: A two-stage defense against adversarial patch attacks on deep neural networks, 2022.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Jujutsu: A two-stage defense against adversarial patch attacks on deep neural networks, 2022

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.885334Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.108100Z digest=sha256:2bd76c300540961ab267bdee1dedb821fa5fa6d5e3150c74ab326647124d17b5

Observation 3f59faa7-3aca-4d59-b7d9-f3d011649801 · outbound

This paper cites Sparse and imperceiv- able adversarial attacks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Sparse and imperceiv- able adversarial attacks

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.875151Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.111768Z digest=sha256:a68eb1d35c4612ea2224472a16d3ce13c332b100d8bbe068770fedc30b4de33f

Observation 35aad53c-ce37-460b-bac1-c750abf35f3a · outbound

This paper cites Diffusion models beat gans on image synthesis.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Diffusion models beat gans on image synthesis

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.865794Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.115181Z digest=sha256:7fa6b618d4314622d90f1fd71fc7d6aee8ed60054ffe0f96b523bb9112069ed0

Observation 770eb60e-4077-4148-91a9-e5def99783c4 · outbound

This paper cites Perceptual quality metrics applied to still image compression.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Perceptual quality metrics applied to still image compression

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.855357Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.118802Z digest=sha256:63c1788689a36651074b4d6154099bb7909942fd17e90d30ded3d81f6d559a45

Observation a13257ea-773b-4d09-adc0-c6bdffd67d6e · outbound

This paper cites Robust physical-world attacks on deep learning visual classification.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Robust physical-world attacks on deep learning visual classification

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.844160Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.122059Z digest=sha256:428ce14ee3410ba070f9a886b20b3ea7bdeada2a18bfdd1794a9b4dbcc40034a

Observation 25de0660-82d6-4d56-8153-9a1a06da10d4 · outbound

This paper cites DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination

Reference 10

Resolution
verified exact
local_arxiv, observed 2026-08-06T19:02:05.444597Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.125550Z digest=sha256:287d39df7b2eee885028fd552174e780a295971409cd960ab3748bf45fb8c679

Observation 967abd3d-f578-4ec7-9a85-0cae36515b7c · outbound

This paper cites Wichmann, and Wieland Brendel.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Wichmann, and Wieland Brendel

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.129316Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.129316Z digest=sha256:363b2b115e118bd1cfd274848c67b5af564c1e4f1b0591fa289b96a89349d354

Observation f9ef3337-8950-4b3c-9adc-62993a6b87cd · outbound

This paper cites Explaining and Harnessing Adversarial Examples.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Explaining and Harnessing Adversarial Examples

Reference 12

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.132750Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.132750Z digest=sha256:ba1947ed859bb727356e97606af82a88e960e7ed779fe6b9f61037c4ebe2c427

Observation 4786e2a1-2d30-4d7a-bcb2-acee2a3c1c5f · outbound

This paper cites Unravelling robustness of deep learning based face recognition against adversarial attacks,.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Unravelling robustness of deep learning based face recognition against adversarial attacks,

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.825439Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.136260Z digest=sha256:2b1475d1b2533e799175d530c57d0d0a76e39ad63230f8a68271713deae86d0c

Observation e2338ec8-a17c-484c-b006-4bf8259e17eb · outbound

This paper cites On visible adversarial perturbations & digital watermarking.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization On visible adversarial perturbations & digital watermarking

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.814904Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.139567Z digest=sha256:5a15169258fe0d52d4d67629c03f98d1ef95c82f5d40069cb86502b002906249

Observation 66a9de09-e542-4cbe-b864-bf9d86bc4038 · outbound

This paper cites Deep residual learning for image recognition.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Deep residual learning for image recognition

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.804253Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.143551Z digest=sha256:a7eb935d364609abe51d8fa4e915ff7b05f558e05b6527a3854b481f29aa0461

Observation b3f5c767-0e04-458a-85ea-1c0dd0710cfb · outbound

This paper cites CLIPScore: A Reference-free Evaluation Metric for Image Captioning.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization CLIPScore: A Reference-free Evaluation Metric for Image Captioning

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.146699Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.146699Z digest=sha256:6ac957823987164b99f523275071720cdcdbfd9720cf0874eabc270034f69c91

Observation 47bba56d-9829-4106-97ce-f13f8f00a064 · outbound

This paper cites Denoising diffu- sion probabilistic models.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Denoising diffu- sion probabilistic models

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.793798Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.150190Z digest=sha256:710f2db646ba39358457073f983200d18e82c19336604c7aa65f8f1a0a2b73b7

Observation 708f49fc-74e0-41bd-b04f-037451ceade5 · outbound

This paper cites Human imperceptible attacks and applications to improve fairness, 2021.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Human imperceptible attacks and applications to improve fairness, 2021

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.783508Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.153870Z digest=sha256:bbd3dcb7595f5ba9d4d1542b3b6441cca9627ddee7bafa78bb0922ba2146f38e

Observation 0bf0fdf1-7b13-4979-a66c-b91cbb24abdd · outbound

This paper cites Black-box adversarial attacks with limited queries and information, 2018.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Black-box adversarial attacks with limited queries and information, 2018

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.773345Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.157229Z digest=sha256:883e032e195bd89fccdc8903e2ce8ff9ad3f77dc37935b363697618cf95aca1e

Observation 02e2868b-1d8a-42a9-a199-ae7cb21a6b48 · outbound

This paper cites Diffender: Diffusion-based adversarial defense against patch attacks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Diffender: Diffusion-based adversarial defense against patch attacks

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.762770Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.160742Z digest=sha256:d2772a163ac0f032473bdf5a2b4c969386d551150e6b22bb236992265466c896

Observation d449fe56-ebb4-40d4-b508-4eb100ba3bd6 · outbound

This paper cites Lavan: Localized and visible adversarial noise.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Lavan: Localized and visible adversarial noise

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.751908Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.164084Z digest=sha256:fbd5f19022a0627a9372621a2f4b5b95c05662eef7ddb9bba9b69daa9be4df82

Observation 0a17c12f-97b0-47a2-82af-7d07f9f5245f · outbound

This paper cites Advhat: Real- world adversarial attack on arcface face id system.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Advhat: Real- world adversarial attack on arcface face id system

Reference 22

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.740415Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.167688Z digest=sha256:99185e263fd81955361ad44e2c0bf16cbcf17c930fcc067d180ccc7ddcd6d724

Observation 718b978a-7a64-4152-89a2-3ca6f209a2de · outbound

This paper cites Super-resolution of sentinel-2 images: Learning a globally applicable deep neu- ral network.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Super-resolution of sentinel-2 images: Learning a globally applicable deep neu- ral network

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.730070Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.170975Z digest=sha256:7dea3cdc64dce1ff9094531db25ab2d5c54d65e14e2898266a4aecb8e56d4895

Observation 25e07283-ddc1-4be7-9e40-fb24db658449 · outbound

This paper cites Generative Dynamic Patch Attack.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Generative Dynamic Patch Attack

Reference 24

Resolution
verified exact
local_arxiv, observed 2026-08-06T19:02:05.410546Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.174128Z digest=sha256:0c435906424fbbf1b245eb0f1feed3c723e86e355cd823fac54c679815c71c64

Observation 9aa57581-6e9b-4607-a0a9-989727cfb249 · outbound

This paper cites an unresolved cited work.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Unresolved cited work

Reference 25

Resolution
unresolved
raw_fallback, observed 2026-08-06T19:02:05.718918Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.177905Z digest=sha256:22cf4c3f18105a4fc778f44dfbe14b79b2cd169305f541ce7db6ce20f5136ed5

Observation 214276aa-e2fc-454f-8ef6-fd406cf37938 · outbound

This paper cites Perceptual-sensitive gan for generating adversarial patches.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Perceptual-sensitive gan for generating adversarial patches

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.707736Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.181478Z digest=sha256:5ebc5dc8137ac29f1a489addc920aeb40b1a1f570f4aae36ae2b5e3f256b3e87

Observation 9c91745b-6ea1-4887-bbcf-e13d5230ea43 · outbound

This paper cites Segment and complete: Defending object detectors against adversarial patch attacks with robust patch detection.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Segment and complete: Defending object detectors against adversarial patch attacks with robust patch detection

Reference 27

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.695591Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.185239Z digest=sha256:109ccce31658b0bf80350cfc3fb2c782081ad10be02d2823109f31bc07d0a6ae

Observation 0a6c1c1b-9d57-4c96-a075-6c20ba31a3df · outbound

This paper cites Swin transformer: Hierarchical vision transformer using shifted windows.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Swin transformer: Hierarchical vision transformer using shifted windows

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.683587Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.189085Z digest=sha256:2176dd7d809d2a6819ac6434f52bf56030710baf9f0f53a78ec0bc71bcbfec36

Observation e39d81c6-ed70-4879-b6b0-8791fdeba67b · outbound

This paper cites Towards imperceptible and robust adversarial example attacks against 9 neural networks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Towards imperceptible and robust adversarial example attacks against 9 neural networks

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.672104Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.192313Z digest=sha256:f3933dd0ab82f531a179a741148b14bede1590f0c9bac917d85c16e9c492c337

Observation 2aab3dc0-2051-4dbd-9ae3-f43914e6b323 · outbound

This paper cites Towards Deep Learning Models Resistant to Adversarial Attacks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Towards Deep Learning Models Resistant to Adversarial Attacks

Reference 30

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.195978Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.195978Z digest=sha256:c53aefe3c5a2bb3063286e20c3d26f573fe882fc34af0bd9c541af5e2e36fa9d

Observation 1e5c525d-739b-4adb-ae29-dfc23fa4a80d · outbound

This paper cites Deepfool: a simple and accurate method to fool deep neural networks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Deepfool: a simple and accurate method to fool deep neural networks

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.660317Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.199893Z digest=sha256:ef947d2380c55ee160260e9b4071e6bd8533a872dd488b7ab85acd7264560568

Observation 93e9ea78-aeb4-4a1d-a198-6113cc7184c0 · outbound

This paper cites Face Recognition as a Method of Authentication in a Web-Based System.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Face Recognition as a Method of Authentication in a Web-Based System

Reference 32

Resolution
verified exact
local_arxiv, observed 2026-08-06T19:02:05.385165Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.203908Z digest=sha256:391e784a24e6f2f059229c17bc446559206098291446906da191eb9c205a345f

Observation 6f6e5f53-11b8-4f5d-92d2-8c411da88933 · outbound

This paper cites Diffusion models for adver- sarial purification, 2022.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Diffusion models for adver- sarial purification, 2022

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.649317Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.207586Z digest=sha256:cf75f02a115afe44279a25d2728f1d66630fd9bf7647f2cf6e1323b24ed08ad6

Observation be6733dc-537a-4b1c-8f92-3492e02daf89 · outbound

This paper cites Parkhi, Andrea Vedaldi, and Andrew Zisserman.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Parkhi, Andrea Vedaldi, and Andrew Zisserman

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.638192Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.210908Z digest=sha256:b9279500866f99970ba68c50a7e4a9b0c076ed990c6ad76d88b38ba2ca8f2672

Observation 8ac3e957-5ef1-41ad-879c-6a94951ce284 · outbound

This paper cites Visually Imperceptible Adversarial Patch Attacks on Digital Images.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Visually Imperceptible Adversarial Patch Attacks on Digital Images

Reference 35

Resolution
verified exact
local_arxiv, observed 2026-08-06T19:02:05.369809Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.214447Z digest=sha256:ce1578ab169e6c96d35d4404be3e521029a2068b6c326277e651e339c2e0bd22

Observation 92e96646-0315-4f22-babe-dd14a87bb251 · outbound

This paper cites Berg, and Li Fei-Fei.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Berg, and Li Fei-Fei

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.218232Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.218232Z digest=sha256:01cb20d6009141dc8165fc891f3d1a512496621872dab2ea67e6f65ea983bdc7

Observation 3fa15ba9-d27a-43b6-ac83-42b0da465843 · outbound

This paper cites Defense-gan: Protecting classifiers against adversarial attacks using generative models, 2018.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Defense-gan: Protecting classifiers against adversarial attacks using generative models, 2018

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.621102Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.221815Z digest=sha256:b85046952815cb4ec1ca6ca0b8a52a60cf7e3e68d2338126d79599b217931356

Observation 0e0e8cb8-7742-4664-8fa0-782e3ca09cf5 · outbound

This paper cites Grad- cam: Visual explanations from deep networks via gradient- based localization.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Grad- cam: Visual explanations from deep networks via gradient- based localization

Reference 38

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.609035Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.225548Z digest=sha256:098d9876c516011aa286e8fd3f0462c1a22865917d7a26d5edf7b6344f466552

Observation 334692ea-6ccc-4ef7-8183-a94911cce4e3 · outbound

This paper cites Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.598567Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.228749Z digest=sha256:d0d4d752a99332634d671285686118aade7a708d735a9415927c7d686e6547cb

Observation 7f80e671-113d-4a27-83e0-5b16121731b2 · outbound

This paper cites A general framework for adversarial ex- amples with objectives.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization A general framework for adversarial ex- amples with objectives

Reference 40

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.588781Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.232541Z digest=sha256:c84e72e17df189d66069ff47e6d089d8f5ad70664e589537c19a4a7265ef3d0b

Observation 4ad5f2dd-f9a6-4ef8-86f8-91378594a931 · outbound

This paper cites Very Deep Convolutional Networks for Large-Scale Image Recognition.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Very Deep Convolutional Networks for Large-Scale Image Recognition

Reference 41

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.236010Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.236010Z digest=sha256:ee92787b21e8f87b8477051a07033d2e6c88ace1ab29853275c60a8f93f46eca

Observation 7f3193fe-fe52-4f80-a6c2-06657c10d0b8 · outbound

This paper cites Intriguing properties of neural networks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Intriguing properties of neural networks

Reference 42

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.239599Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.239599Z digest=sha256:8c582ec96b495f5f7ac2661fa109f99e4faf4bb99384c64b0d125d977efdc594

Observation 042dd1a1-b454-4fd4-b128-4401f8c54d4d · outbound

This paper cites Jedi: entropy-based localization and removal of adversarial patches.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Jedi: entropy-based localization and removal of adversarial patches

Reference 43

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.577870Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.242958Z digest=sha256:705ffae629e75f564bfb3ae7a10fa0a82048896580c060258a4f2834d609c241

Observation 5971908d-e759-4d83-af38-6c56fe5047dc · outbound

This paper cites Guided Diffusion Model for Adversarial Purification.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Guided Diffusion Model for Adversarial Purification

Reference 44

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.246199Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.246199Z digest=sha256:1ad6c1bf37c4aca18b699b0423927885bf482ed3ba2c4a8c71318127338427af

Observation 3c9d7d99-7724-4a7e-b43c-3670910704ad · outbound

This paper cites Generating Visually Realistic Adversarial Patch.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Generating Visually Realistic Adversarial Patch

Reference 45

Resolution
verified exact
local_arxiv, observed 2026-08-06T19:02:05.323915Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.249694Z digest=sha256:7a6c0de03dc300cf7f754127e01ee7a55cf8e06aea19aeb1aac133c57f5897c2

Observation 33270bd5-cf97-443f-b362-7aff7daf8024 · outbound

This paper cites A universal image quality index.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization A universal image quality index

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.568001Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.253404Z digest=sha256:12deb345e1f0f44edf4ba198d8b12a2b9906b78a0896a1f403019059cb15fdeb

Observation 78b34c76-dbb8-4b4c-a085-1f1d59b48ca0 · outbound

This paper cites Image quality assessment: from error visibility to structural similarity.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Image quality assessment: from error visibility to structural similarity

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.558099Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.256345Z digest=sha256:fdf0295cca3264d46e9c691822f92fcc4c73f106a851335629e15cd2588cf3db

Observation a7d579ed-de42-4dbd-89c5-284b20c65545 · outbound

This paper cites Privacy-preserving adversarial facial features.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Privacy-preserving adversarial facial features

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.547636Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.259670Z digest=sha256:5b9df7002e85dc023184c4962d23f422dc6ec83e53be86fe657a4ac89cbf60e6

Observation c4161b82-f911-4591-858c-68264d2d69eb · outbound

This paper cites Patchguard++: Efficient provable attack detection against adversarial patches, 2021.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Patchguard++: Efficient provable attack detection against adversarial patches, 2021

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.537589Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.263014Z digest=sha256:32d527ed7cd8025aeab24d42661b476a21bf01caccc2353f900e0e60013e61d2

Observation 0d965048-9686-4749-ae0e-093211d71678 · outbound

This paper cites Densepure: Understanding diffusion models for adversarial robustness.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Densepure: Understanding diffusion models for adversarial robustness

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.527593Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.266074Z digest=sha256:8299bade68ffe4377bbfc7f9b96940baaab16170dc98138f3769642b8789fd27

Observation b73a1066-a902-4348-b8a8-5a6b3a214a5b · outbound

This paper cites Patchzero: Defending against adversarial patch at- tacks by detecting and zeroing the patch.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Patchzero: Defending against adversarial patch at- tacks by detecting and zeroing the patch

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.517128Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.269082Z digest=sha256:cf9e0be432fab1967102c8b50be347af4ffad46b0e6ec4a1376d3bb0083bf8a4

Observation b8fdc49d-a8f3-4563-bcd8-328ce302da6a · outbound

This paper cites Visualizing and un- derstanding convolutional networks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Visualizing and un- derstanding convolutional networks

Reference 52

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.506635Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.272766Z digest=sha256:a8abd1a7e7c9af2e8c2134a3243ae3da7ba310f33ffb96f9eb920a24d3e32ca2

Observation 6030ad09-3b94-40b0-9ae4-94ed7e8499b5 · outbound

This paper cites The unreasonable effectiveness of deep features as a perceptual metric.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization The unreasonable effectiveness of deep features as a perceptual metric

Reference 53

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.496718Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.276338Z digest=sha256:47f92d4c21c9f81bd02bfcea073c49a201fb2c3f514d194f29e35ec2feb63220

Observation 490bde89-7e2c-4dac-8695-16ca84298333 · outbound

This paper cites The translucent patch: A physical and universal attack on object detectors.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization The translucent patch: A physical and universal attack on object detectors

Reference 54

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.486339Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.279629Z digest=sha256:e5691a9b8ec1f68d8b882fa73aabd8a0d81f48b4a4f813789911de9f4a3da968

Observation a9ff3bf6-de3e-4bdf-84b9-b30051d54f3c · outbound

This paper cites Toaster” class to include “Baseball.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Toaster” class to include “Baseball

Reference 55

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.476133Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.282996Z digest=sha256:ffc5e454471c28382e6339cf3fad5c6c544191f38b2864149415633448cf5154

Observation cab95ced-b4d6-471c-9424-016c09b08aae · outbound

This paper cites A. J. Buckley.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization A. J. Buckley

Reference 56

Resolution
malformed identifier
raw_fallback, observed 2026-08-06T19:02:05.466187Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

source=pdf_text observed=2026-08-06T19:02:05.286844Z digest=sha256:eec50a771ee782070ff68ff12ba045ed100b8d2e7f7ebe5fa440d7b77d0c8e50

Pith citing papers

No inbound Pith citation observations are available.